IT-Sentinel

> TODAY'S SUMMARY (109 articles)

Today's cybersecurity landscape reveals several critical developments. AWS AgentCore's security vulnerabilities, including weak VM isolation and excessive permissions, have been exposed, potentially facilitating attacks. In international law enforcement, Japan has extradited a Russian national linked to the Qilin ransomware gang to Germany, where further arrests have occurred, despite ongoing attacks by the group. The FBI has also arrested members of the ShinyHunters extortion group, underscoring the persistent threat of data breaches. Meanwhile, unpatched vulnerabilities in the AhsayCBS backup platform are being actively exploited for webshell deployment and cryptocurrency mining. A noticeable trend is the shift in ransomware tactics, with attackers increasingly opting for data theft rather than encryption. Lastly, the U.S. and allies have disrupted Chinese state-sponsored hacking tools, illustrating ongoing geopolitical cybersecurity tensions.

// AI-powered summary generated at 20:00

> Proxmox VE – Protégez votre serveur et les VM avec le pare-feu natif

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-05-06 16:00]

Apprenez à mettre en place des règles de filtrage sur Proxmox VE avec le pare-feu intégré, afin de protéger le serveur, les VM et les conteneurs. Le post Proxmox VE – Protégez votre serveur et les VM avec le pare-feu natif a été publié sur IT-Connect.

> Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report

[SOURCE] Microsoft Security [LANGUAGE: EN] [DATE: 2026-05-06 16:00]

Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report, as we see automation and AI as core components of the future of cybersecurity. The post Microsoft named an overall leader in Kuppinger...

> Ubuntu 26.04 Dynaconf Vulnerability for Arbitrary Code Execution Issue

[SOURCE] LinuxSecurity - Ubuntu [LANGUAGE: EN] [DATE: 2026-05-06 15:53]

Dynaconf could be made to execute arbitrary code.

> Sysdig delivers cloud security that runs inside AI coding agents

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-05-06 15:50]

Sysdig announced headless cloud security, a cyberdefense platform designed for the agentic AI era. Sysdig Headless Cloud Security enables customers to drop the traditional, one-size-fits-all UI approach and equip their AI agents as the primary operators of machine-speed, data-driven cyberdefense. Ov...

> Hackers Hate AI Slop Even More Than You Do

[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2026-05-06 15:49]

It's not just you. Scammers, hackers, and other cybercriminals are complaining about “AI shit” flooding platforms where they discuss cyberattacks and other illegal activity.

> CloudZ RAT : ce malware espionne vos SMS via l’application Mobile Connecté de Windows

[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-05-06 15:41]

Une nouvelle menace cible l'application Mobile Connecté de Microsoft, utilisant CloudZ RAT et Pheno pour exfiltrer discrètement vos données mobiles sur Windows. Le post CloudZ RAT : ce malware espionne vos SMS via l’application Mobile Connecté de Windows a été publié sur IT-Connect.

> ClickFix campaign uses fake macOS utilities lures to deliver infostealers

[SOURCE] Microsoft Security [LANGUAGE: EN] [DATE: 2026-05-06 15:20]

Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands. This campaign evades traditional defenses by stealing credentials, wallets, and sensitive data. The post ClickFix campaign uses fake macOS utilities lures to deliver infostealers...

> Oracle Linux 10 osbuild-composer Important ELSA-2026-13643 Fixes

[SOURCE] LinuxSecurity - Oracle [LANGUAGE: EN] [DATE: 2026-05-06 15:14]